Read the docs
Red Hat Security Advisory

RHSA-2026:22964

kernel security update

Released 2026-06-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 7 records

TI-2026-31217 CVE-2026-43037 · GHSA-p2wf-qj6m-x5fg

ip6_tunnel: clear skb2->cb[] in ip4ip6_err()

Priority MEDIUM 50

In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Oskar Kjos reported the following problem.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00688 Published 2026-05-01 Partial fix · 5.10.253, 5.15.203 +6 CWE-121
TI-2026-31218 CVE-2026-43038 · GHSA-78m7-4xgc-xrrq

ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()

Priority MEDIUM 48

In the Linux kernel, the following vulnerability has been resolved: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() Sashiko AI-review observed: In ip6_err_gen_icmpv6_unreach(), the skb is an outer IPv4 ICMP…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00255 Published 2026-05-01 Partial fix · 5.10.253, 5.15.203 +6 CWE-787
TI-2024-27433 CVE-2024-41073 · GHSA-q423-q7jg-m3rq

nvme: avoid double free special payload

Priority MEDIUM 43

In the Linux kernel, the following vulnerability has been resolved: nvme: avoid double free special payload If a discard request needs to be retried, and that retry may fail before a new special payload is added, a doubl…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00672 Published 2024-07-29 Partial fix · 5.10.237, 5.15.164 +4 CWE-415
TI-2025-26840 CVE-2025-40170 · GHSA-3vr4-gx8q-4fgg

net: use dst_dev_rcu() in sk_setup_caps()

Priority LOW 39

In the Linux kernel, the following vulnerability has been resolved: net: use dst_dev_rcu() in sk_setup_caps() Use RCU to protect accesses to dst->dev from sk_setup_caps() and sk_dst_gso_max_size().

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00193 Published 2025-11-12 Partial fix · 6.1.191, 6.6.160 +3
TI-2025-26828 CVE-2025-40158 · GHSA-4g43-pmw7-v27w

ipv6: use RCU in ip6_output()

Priority LOW 36

In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6_output() Use RCU in ip6_output() in order to use dst_dev_rcu() to prevent possible UAF.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00555 Published 2025-11-12 Partial fix · 6.1.191, 6.6.160 +3
TI-2025-26806 CVE-2025-40135 · GHSA-q28q-889g-6rx2

ipv6: use RCU in ip6_xmit()

Priority LOW 36

In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6_xmit() Use RCU in ip6_xmit() in order to use dst_dev_rcu() to prevent possible UAF.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0071 Published 2025-11-12 Partial fix · 5.15.224, 6.1.167 +4
TI-2026-18653 CVE-2026-23216 · GHSA-jfq5-qg8x-7rmp

scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()

Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() In iscsit_dec_conn_usage_count(), the function calls complete() while holding t…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00142 Published 2026-02-18 Partial fix · 5.10.250, 5.15.200 +5 CWE-416